I did open task for this http://bugtracker.ispconfig.org/index.php?do=details&task_id=441&project=3&pagenum=21 but is there an alternative way to fix this? Users are opening email accounts with passwords like 123456 and spammers figure this out and than use my mail server to send out spam which overloads my server and get's the IP black listed. This is something that I have to deal on regular basis. F**K MY LIFE.
I have written a short tutorial on how to fin out weak passwords for your ISPConfig 3 mail users. Check it out at http://www.howtoforge.com/node/7259